JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 177.52.50.114

177.52.50.114 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 0%: ?

ISP	SEMPRE TELECOMUNICACOES LTDA
Usage Type	Fixed Line ISP
ASN	AS28198
Hostname(s)	177-52-50-114.sempre.tec.br
Domain Name	sempre.tec.br
Country	🇧🇷 Brazil
City	Brumadinho, Minas Gerais

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 177.52.50.114

Whois 177.52.50.114

IP Abuse Reports for 177.52.50.114:

This IP address has been reported a total of 53 times from 25 distinct sources. 177.52.50.114 was first reported on November 19th 2023, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2025-10-06 13:37:21 (10 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇲🇾 syokadmin	2025-10-04 18:07:51 (10 months ago)	177.52.50.114 (BR/Brazil/177-52-50-114.sempre.tec.br), 5 distributed SMTP Logins on account [account ... show more 177.52.50.114 (BR/Brazil/177-52-50-114.sempre.tec.br), 5 distributed SMTP Logins on account [[email protected]] in the last 300 secs show less	Brute-Force
Anonymous	2025-09-24 09:38:47 (11 months ago)	Spamming registration page	Web Spam
🇲🇾 syokadmin	2025-09-21 11:02:06 (11 months ago)	177.52.50.114 (BR/Brazil/177-52-50-114.sempre.tec.br), 5 distributed SMTP Logins on account [account ... show more 177.52.50.114 (BR/Brazil/177-52-50-114.sempre.tec.br), 5 distributed SMTP Logins on account [[email protected]] in the last 300 secs show less	Brute-Force
🇲🇾 syokadmin	2025-09-20 03:00:19 (11 months ago)	177.52.50.114 (BR/Brazil/177-52-50-114.sempre.tec.br), 5 distributed SMTP Logins on account [account ... show more 177.52.50.114 (BR/Brazil/177-52-50-114.sempre.tec.br), 5 distributed SMTP Logins on account [[email protected]] in the last 300 secs show less	Brute-Force
🇳🇱 antikirra	2025-09-02 09:24:11 (11 months ago)	Proxy Port Scanning	Port Scan
🇺🇸 nowyouknow	2025-08-19 22:10:24 (1 year ago)	(From [email protected])	Phishing Web Spam
🇺🇸 mind5t0rm	2025-07-29 07:22:34 (1 year ago)	(WPLOGIN) WP Login Attack 177.52.50.114 (BR/Brazil/177-52-50-114.sempre.tec.br): 3 in the last 3600 ... show more (WPLOGIN) WP Login Attack 177.52.50.114 (BR/Brazil/177-52-50-114.sempre.tec.br): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 177.52.50.114 - - [29/Jul/2025:14:22:24 +0700] "POST /wp-login.php?action=lostpassword HTTP/2.0" 302 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 177.52.50.114 - - [29/Jul/2025:14:22:28 +0700] "GET /wp-login.php?checkemail=confirm HTTP/2.0" 200 2011 "https://greekthai.com/wp-login.php?action=lostpassword" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 177.52.50.114 - - [29/Jul/2025:14:22:32 +0700] "POST /wp-login.php?action=lostpassword HTTP/2.0" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Port Scan
Anonymous	2025-07-14 01:43:26 (1 year ago)	Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇺🇸 nowyouknow	2025-06-22 07:15:09 (1 year ago)	(From [email protected])	Phishing Web Spam
🇺🇸 nowyouknow	2025-06-14 17:28:22 (1 year ago)	(From [email protected])	Phishing Web Spam
🇳🇱 GabrielJST	2025-06-14 13:03:10 (1 year ago)	(wordpress) Failed wordpress login from 177.52.50.114 (BR/Brazil/177-52-50-114.sempre.tec.br)	Brute-Force
🇺🇸 nowyouknow	2025-05-27 07:37:06 (1 year ago)	(From [email protected])	Phishing Web Spam
🇷🇺 nyuuzyou	2025-05-19 15:10:27 (1 year ago)	{"action": "connection", "dest_ip": "0.0.0.0", "dest_port": "22", "server": "ssh_server", "src_ip": ... show more {"action": "connection", "dest_ip": "0.0.0.0", "dest_port": "22", "server": "ssh_server", "src_ip": "177.52.50.114", "src_port": "59021", "timestamp": "2025-05-19T15:09:24.241162"} show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-05-12 05:33:07 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 177.52.50.114 (177-52-50-114.sempre.tec.br): 1 ... show more (mod_security) mod_security (id:225170) triggered by 177.52.50.114 (177-52-50-114.sempre.tec.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 12 01:33:02.641820 2025] [security2:error] [pid 3001854:tid 3001854] [client 177.52.50.114:60981] [client 177.52.50.114] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|insidepublications.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "insidepublications.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aCGIDqVyxwlRd-xMKCsmigAAABE"], referer: https://insidepublications.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2400:cb00:1036:1000:5279:3b05:3235:1b82

🇰🇷 115.160.67.73

🇺🇸 66.132.195.19

🇹🇭 8.213.218.35

🇨🇳 171.114.231.211

🇸🇪 155.4.244.107

🇧🇷 128.201.187.183

🇨🇳 116.179.37.183

🇫🇷 91.231.89.147

🇺🇸 74.101.234.42

🇺🇸 64.62.156.181

🇺🇸 20.127.197.154

🇺🇸 20.65.177.113

🇯🇵 8.211.162.45

🇬🇧 5.252.83.14

🇬🇧 2.57.17.124

🇬🇧 195.206.182.205

🇮🇩 163.7.1.218

🇩🇪 118.193.59.15

🇨🇳 61.184.48.84